Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

this update fixes an information disclosure and a connection hijacking vulnerability (CVE-2011-4091, CVE-2011-4093).

Update of net6 to version 1.3.14 :

  + Ensure that overflows on the user ID assigned to each     connection do not yield one that is already in use.
    [CVE-2011-4093, bnc#727710]

  + Do not leak information about logged-in users.
    [CVE-2011-4091, bnc#727708]

http://permalink.gmane.org/gmane.network.obby.announce/50

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75975	openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)	Nessus	SuSE Local Security Checks	medium
75681	openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)	Nessus	SuSE Local Security Checks	medium
74586	openSUSE Security Update : net6 (openSUSE-2012-19)	Nessus	SuSE Local Security Checks	medium
56939	Fedora 16 : net6-1.3.14-1.fc16 (2011-15363)	Nessus	Fedora Local Security Checks	medium
56938	Fedora 14 : net6-1.3.14-1.fc14 (2011-15332)	Nessus	Fedora Local Security Checks	medium
56937	Fedora 15 : net6-1.3.14-1.fc15 (2011-15326)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2011-4093

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium